Skip to content
Noroxi

nedi records

26 published records for vendor nedi.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21
  4. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

26 records
  • CVE-2021-26753
    39Monitor

    NeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the endpoint /System-Files.php via the txt HTTP PO

    CriticalCVSS 9.9No exploitEPSS 1%

    nedi · nediFeb 12, 2021

  • CVE-2018-20727
    37Monitor

    Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the server side via the flt pa

    HighCVSS 8.8No exploitEPSS 5%

    nedi · nediJan 16, 2019

  • CVE-2022-40895
    37Monitor

    In certain Nedi products, a vulnerability in the web UI of NeDi login & Community login could allow an unauthenticated, remote attacker to a

    CriticalCVSS 9.1No exploitEPSS 2%

    nedi · nediOct 6, 2022

  • CVE-2020-14412
    36Monitor

    NeDi 1.9C is vulnerable to Remote Command Execution.

    HighCVSS 8.8No exploitEPSS 3%

    nedi · nediJun 29, 2020

  • CVE-2020-14414
    36Monitor

    NeDi 1.9C is vulnerable to Remote Command Execution.

    HighCVSS 8.8No exploitEPSS 3%

    nedi · nediJun 29, 2020

  • CVE-2021-26752
    35Monitor

    NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoint /Nodes-Traffic.php

    HighCVSS 8.8No exploitEPSS 1%

    nedi · nediFeb 12, 2021

  • CVE-2021-26751
    35Monitor

    NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php

    HighCVSS 8.8No exploitEPSS 1%

    nedi · nediFeb 12, 2021

  • CVE-2018-20728
    35Monitor

    A cross site request forgery (CSRF) vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges via User-Management.p

    HighCVSS 8.8No exploitEPSS 0%

    nedi · nediJan 16, 2019

  • CVE-2018-20730
    30Monitor

    A SQL injection vulnerability in NeDi before 1.7Cp3 allows any user to execute arbitrary SQL read commands via the query.php component.

    HighCVSS 7.5No exploitEPSS 1%

    nedi · nediJan 16, 2019

  • CVE-2020-14413
    25Monitor

    NeDi 1.9C is vulnerable to XSS because of an incorrect implementation of sanitize() in inc/libmisc.php.

    MediumCVSS 6.1Proof of conceptEPSS 3%

    nedi · nediJun 29, 2020

  • CVE-2018-20731
    24Monitor

    A stored cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via U

    MediumCVSS 6.1No exploitEPSS 0%

    nedi · nediJan 16, 2019

  • CVE-2018-20729
    24Monitor

    A reflected cross site scripting (XSS) vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML vi

    MediumCVSS 6.1No exploitEPSS 0%

    nedi · nediJan 16, 2019

  • CVE-2020-15017
    24Monitor

    NeDi 1.9C is vulnerable to reflected cross-site scripting.

    MediumCVSS 6.1No exploitEPSS 0%

    nedi · nediJun 26, 2020

  • CVE-2020-15016
    24Monitor

    NeDi 1.9C is vulnerable to reflected cross-site scripting.

    MediumCVSS 6.1No exploitEPSS 0%

    nedi · nediJun 26, 2020

  • CVE-2020-15032
    21Monitor

    NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack.

    MediumCVSS 5.4No exploitEPSS 0%

    nedi · nediJul 7, 2020

  • CVE-2020-15034
    21Monitor

    NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack.

    MediumCVSS 5.4No exploitEPSS 0%

    nedi · nediJul 7, 2020

  • CVE-2020-15028
    21Monitor

    NeDi 1.9C is vulnerable to a cross-site scripting (XSS) attack.

    MediumCVSS 5.4No exploitEPSS 0%

    nedi · nediJul 7, 2020

  • CVE-2020-15030
    21Monitor

    NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack.

    MediumCVSS 5.4No exploitEPSS 0%

    nedi · nediJul 7, 2020

  • CVE-2020-15029
    21Monitor

    NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack.

    MediumCVSS 5.4No exploitEPSS 0%

    nedi · nediJul 7, 2020

  • CVE-2020-15031
    21Monitor

    NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack.

    MediumCVSS 5.4No exploitEPSS 0%

    nedi · nediJul 7, 2020

  • CVE-2020-15033
    21Monitor

    NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack.

    MediumCVSS 5.4No exploitEPSS 0%

    nedi · nediJul 7, 2020

  • CVE-2020-23989
    21Monitor

    NeDi 1.9C allows pwsec.php oid XSS.

    MediumCVSS 5.4No exploitEPSS 0%

    nedi · nediNov 2, 2020

  • CVE-2020-15036
    21Monitor

    NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack.

    MediumCVSS 5.4No exploitEPSS 0%

    nedi · nediJul 7, 2020

  • CVE-2020-15037
    21Monitor

    NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack.

    MediumCVSS 5.4No exploitEPSS 0%

    nedi · nediJul 7, 2020

  • CVE-2020-15035
    21Monitor

    NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack.

    MediumCVSS 5.4No exploitEPSS 0%

    nedi · nediJul 7, 2020